W32.HLLW.Infex.B@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all the contacts in Outlook Address Book. The email attachment is q83d.rar.
The subject line is one of the following:
- VERY DANGEROUS I-WORM
- 64bit Notepad!
- Do you Get spam?
- Usama Bin laden II ?
- Saddam Dead or Alive?
- Nelson Mandella dead?
- Bush Resigns
- STOCK MARKET FALLS 80%
- Bill Gates ARRESTED
- Undocumented Secrets about <%string%>
Where %string% is one of the following:
The worm attempts to spread itself through some file-sharing networks, such as BearShare, eDonkey2000, Gnucleus, Grokster, KaZaA, KaZaA Lite, KMD, Limewire, Morpheus, Overnet, Shareaza, Rapigator, Toadnode, Tesla, WinMX, and XoloX. It also attempts to send itself to other ICQ users.
This threat is written in the Microsoft Visual Basic programming language and is compressed with FSG.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.